Legal
Privacy Policy
Last updated: 30 September 2026
Our privacy philosophy
As little as possible and as safe as possible.
We collect only the personal data we actually need, use it only for clear purposes, and protect it with technical and organisational safeguards.
Our EU sovereignty commitment
We are GDPR compliant and process data as much as possible within the EU. We are actively working toward hosting all core services on EU soil, by EU companies, under EU jurisdiction.
Where an essential service is currently outside the EU/EEA, we apply GDPR-compliant safeguards (including Standard Contractual Clauses where applicable).
Our AI policy
Our AI use follows our CARE policy principles:
- AI supports people; it does not replace human responsibility.
- Humans remain accountable for client-impacting decisions.
- We minimise data shared with AI tools and avoid unnecessary retention.
- We are moving toward EU-based AI infrastructure where feasible.
1) Scope: website visit vs requesting our services
A. Visiting our website
When you visit moderating.eu (including new.moderating.eu and related public hosts) without contacting us or requesting services:
- We process only minimal technical data needed to operate and secure the website (for example, essential logs and essential technical cookies).
- Our default measurement uses cookieless analytics (Plausible and, when enabled, self-hosted Umami) that does not rely on personal cookies or cross-site advertising identifiers. Self-hosted Umami stores those aggregate visits in our own database. Session replay and heatmaps are not used.
- The site does not set a cookie until you choose to play an embedded video. That one cookie remembers the choice. The video player (YouTube or Vimeo) can then set its own cookies. We do not use Google Analytics.
- If you do not play a video, no consent cookie is stored and no video player is loaded. Essential site function and cookieless analytics (Plausible and, when enabled, self-hosted Umami) may still run.
B. Requesting our services
When you contact us, submit Contact & Book, request a quote, subscribe to a mailing, or otherwise engage us for services, we begin processing your personal data according to this policy for:
- communication and project preparation
- service delivery
- planning, coordination, and execution
- invoicing, accounting, and legal compliance
2) What data we process
Depending on your interaction with us, we may process:
- contact details (name, email, phone, organisation, role)
- service and project information (briefings, schedules, event details, files)
- financial/admin data (quotes, invoices, payment references)
- limited technical/security data (IP, device/browser metadata, anti-abuse logs)
- enquiry attribution metadata when you submit Contact & Book (for example page path and UTM parameters, stored to improve our service — not for advertising resale)
We do not intentionally collect special category personal data unless strictly necessary and legally justified.
3) Legal bases (GDPR)
We process personal data based on one or more of:
- Contract / pre-contract (Art. 6(1)(b))
- Legitimate interests (Art. 6(1)(f)) such as secure operations, service quality, and understanding how the public site is used in aggregate
- Legal obligation (Art. 6(1)(c)) such as tax/accounting requirements
- Consent (Art. 6(1)(a)) for the video cookie, embedded players such as YouTube, and specific optional communication (for example newsletters)
4) Data minimisation and purpose limitation
We process only data that is relevant and necessary for clear, legitimate purposes. We do not sell personal data.
5) Retention
Retention depends on data type and legal requirements. In general:
- website technical logs: limited period for security/troubleshooting
- service/project records: as needed for delivery, quality, and legal defence
- financial records: according to legal accounting/tax obligations
- operational security logs: only as long as needed for security/compliance
- consent preferences: stored in your browser (and a short-lived cookie) until you change them or clear site data
When retention is no longer required, data is deleted or anonymised where feasible.
6) Sharing and processors
We share personal data only with necessary processors for business operations (for example hosting, infrastructure, database, email/calendar, backups, and privacy-respecting analytics), and only where needed.
All processors are bound by contractual and data protection obligations.
7) International transfers
If data is transferred outside the EU/EEA, we use lawful transfer mechanisms and safeguards under GDPR.
8) Your rights
Under GDPR, you have the right to:
- access your personal data
- correct inaccurate data
- request deletion (where applicable)
- restrict processing
- object to processing based on legitimate interests
- data portability (where applicable)
- withdraw consent (where consent is the legal basis)
- lodge a complaint with your supervisory authority
To exercise your rights, contact us at info@moderating.eu.
9) Cookies and similar technologies
We use:
- Essential cookies for core functionality (including remembering your cookie/embed preferences)
- Cookieless analytics (Plausible and, when enabled, self-hosted Umami) for aggregate traffic measurement without advertising cookies
- Video embeds only after you accept — YouTube or Vimeo, asked when you press play
There is no cookie banner on pages without a video. Press play and you can accept the one cookie, or leave it. You can change that later via Cookie settings in the site footer, or here: .
10) Security
We apply layered security controls including:
- encryption in transit
- least-privilege access controls
- role-based permissions
- logging and monitoring
- anti-abuse protections on sensitive/public endpoints
11) Policy updates
We may update this Privacy Policy from time to time. Material updates will be reflected by changing the "Last updated" date.
12) Contact
For privacy questions or rights requests: info@moderating.eu
Prefer to book a moderator or send a brief? Use Contact & Book.